403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-20.01.21.txt
 ## swap threshold exceeded
## server overview
2025-11-20.01.21 load[3] mem[72/58] mysql[6/10] httpd[15]
              total        used        free      shared  buff/cache   available
Mem:           2363        1612          92          21         658         555
Swap:          1999        1252         747
 01:21:02 up 26 min,  0 users,  load average: 4.17, 3.54, 2.84
## system overview
top - 01:21:02 up 26 min,  0 users,  load average: 4.17, 3.54, 2.84
Tasks: 204 total,   3 running, 200 sleeping,   0 stopped,   1 zombie
%Cpu(s): 81.2 us, 18.8 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    78308 free,  1682076 used,   659916 buff/cache
KiB Swap:  2047996 total,   765180 free,  1282816 used.   538276 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1752 mysql     20   0 1462084 216212   3832 S  87.5  8.9   0:48.12 /usr/sbin+
 22330 healtho+  20   0  448864  54892   3796 S  43.8  2.3   0:00.21 php-fpm: +
 22183 healtho+  20   0  465380  71572   4220 S  31.2  3.0   0:05.17 php-fpm: +
 22382 nigeria   20   0  404052  16136  10376 S  12.5  0.7   0:00.05 /opt/cpan+
 22423 cloudw    20   0  353712  15976  10492 S   6.2  0.7   0:00.01 /opt/cpan+
     1 root      20   0   44256   3328   1508 S   0.0  0.1   0:02.96 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.27 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:01.77 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.41 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    31 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kworker/+
    36 root      20   0       0      0      0 S   0.0  0.0   0:07.61 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kauditd]
   104 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   252 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   253 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root      20   0       0      0      0 S   0.0  0.0   0:00.16 [kworker/+
   257 root       0 -20       0      0      0 S   0.0  0.0   0:00.50 [kworker/+
   267 root       0 -20       0      0      0 S   0.0  0.0   0:00.58 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:00.21 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   40240   6920   6596 S   0.0  0.3   0:01.07 /usr/lib/+
   381 root      20   0   45352    268     96 S   0.0  0.0   0:00.34 /usr/lib/+
   410 root      16  -4   55532    496    368 S   0.0  0.0   0:00.16 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   476 polkitd   20   0  612240    864    500 S   0.0  0.0   0:00.25 /usr/lib/+
   477 dbus      20   0   58592   1296    624 S   0.0  0.1   0:00.92 /usr/bin/+
   486 rpc       20   0   69256    168     60 S   0.0  0.0   0:00.01 /sbin/rpc+
   495 root      20   0   24696   1160    812 S   0.0  0.0   0:00.41 /usr/lib/+
   499 root      20   0   52852    104    100 S   0.0  0.0   0:00.00 /usr/sbin+
   503 root      20   0  152780    140     96 S   0.0  0.0   0:00.00 /usr/sbin+
   505 nscd      20   0  928956   1352    652 S   0.0  0.1   0:01.20 /usr/sbin+
   506 root      20   0  224144   6436    860 S   0.0  0.3   0:00.09 queueproc+
   508 root      20   0   21540    408    296 S   0.0  0.0   0:00.03 /usr/sbin+
   515 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   547 root      20   0    4388     36     32 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  124480    448    312 S   0.0  0.0   0:00.04 /usr/sbin+
   558 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   568 root      20   0  114704     36     36 S   0.0  0.0   0:00.03 /bin/bash
   572 root      20   0  108296     52     48 S   0.0  0.0   0:00.00 /sbin/age+
   609 mailnull  20   0   89116   3640    636 S   0.0  0.2   0:00.07 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   669 root       0 -20       0      0      0 S   0.0  0.0   0:02.70 [loop0]
   683 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   684 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   920 root      20   0  153404    308    224 S   0.0  0.0   0:00.04 pure-ftpd+
   921 systuser  20   0   10388     48      0 S   0.0  0.0   0:00.00 /usr/loca+
   923 root      20   0   51508    500    340 S   0.0  0.0   0:00.06 /usr/sbin+
   925 systuser  20   0  113676   1848      0 S   0.0  0.1   0:00.00 /usr/loca+
   926 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.03 /usr/bin/+
   927 telegraf  20   0 5654048  39324   5084 S   0.0  1.6   0:01.11 /usr/loca+
   928 systuser  20   0  114016  13576   2300 S   0.0  0.6   0:00.48 /usr/loca+
   929 root      20   0 1349832   9352     24 S   0.0  0.4   0:30.45 /usr/bin/+
   930 root      20   0 1277312  11308     52 S   0.0  0.5   0:23.22 /usr/bin/+
   931 systuser  20   0   12660     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   933 root      20   0  216400   6972   5512 S   0.0  0.3   0:00.52 /usr/sbin+
   935 root      20   0  439788  11416  11208 S   0.0  0.5   0:00.17 php-fpm: +
   936 named     20   0  637996  23984   1816 S   0.0  1.0   0:01.43 /usr/sbin+
   938 root      20   0  261028   4728   1272 S   0.0  0.2   0:00.30 cpsrvd (S+
   942 root      20   0  400740   2884    648 S   0.0  0.1   0:00.74 php-fpm: +
   947 root      20   0 1763312 393916   1208 S   0.0 16.3   0:13.62 /usr/loca+
   964 root      20   0  111304    412    316 S   0.0  0.0   0:00.22 /usr/sbin+
   972 root      20   0  389508    740    532 S   0.0  0.0   0:00.11 php-fpm: +
   979 cpanelc+  20   0    9828   2744   2312 S   0.0  0.1   0:01.32 /usr/loca+
   982 root      20   0  396248    652    476 S   0.0  0.0   0:00.11 php-fpm: +
   984 root      20   0  388892    696    484 S   0.0  0.0   0:00.11 php-fpm: +
   985 root      20   0  445028   3236   3124 S   0.0  0.1   0:00.12 sw-engine+
   986 systuser  20   0  113272   1820      0 S   0.0  0.1   0:00.00 /usr/loca+
   987 root      20   0  572372    760    292 S   0.0  0.0   0:00.26 /usr/bin/+
  1116 dovenull  20   0   46912   1544    960 S   0.0  0.1   0:00.01 dovecot/p+
  1117 dovenull  20   0   47592   3256   2164 S   0.0  0.1   0:00.04 dovecot/i+
  1118 dovecot   20   0   10320    240    124 S   0.0  0.0   0:00.00 dovecot/a+
  1119 root      20   0   10452    380    212 S   0.0  0.0   0:00.01 dovecot/l+
  1120 dovenull  20   0   46912   1812   1220 S   0.0  0.1   0:00.03 dovecot/p+
  1121 dovenull  20   0   47068   3032   2328 S   0.0  0.1   0:00.00 dovecot/i+
  1128 root      20   0   24528   2188    512 S   0.0  0.1   0:00.02 dovecot/c+
  1133 systuser  20   0  157708   2996    944 S   0.0  0.1   0:00.01 SonarPush+
  1137 dovecot   20   0   13568    476    268 S   0.0  0.0   0:00.00 dovecot/s+
  1172 root      20   0  248320 119796   2904 S   0.0  4.9   0:03.01 /usr/loca+
  1190 dovecot   20   0   41144   1464    992 S   0.0  0.1   0:00.04 dovecot/a+
  1258 wp-tool+  20   0  412368  32236   1444 S   0.0  1.3   0:00.74 /usr/bin/+
  1259 wp-tool+  20   0  387528  12948   1320 S   0.0  0.5   0:00.11 /usr/bin/+
  1294 root      20   0  228228  18884   5984 S   0.0  0.8   0:00.10 dnsadmin +
  1298 root      20   0  262224  22792   5052 S   0.0  0.9   0:00.16 cpdavd - +
  1300 root      20   0  209344  10792   1960 S   0.0  0.4   0:00.49 tailwatchd
  1692 root      20   0  299272    884    504 S   0.0  0.0   0:00.04 php-fpm: +
  1709 root      38  18  130416   1428    712 S   0.0  0.1   0:00.00 cpanellog+
  1943 root      20   0  266992   8056    772 S   0.0  0.3   0:00.24 /usr/sbin+
  1945 root      20   0   12832    424    292 S   0.0  0.0   0:00.26 /usr/loca+
  1946 root      20   0   12732    272    200 S   0.0  0.0   0:00.22 /usr/loca+
  1947 root      20   0   12876    340    232 S   0.0  0.0   0:00.23 /usr/loca+
  1952 root      20   0   53268     92     92 S   0.0  0.0   0:00.04 /usr/loca+
  2017 root      20   0  181300   9624   1192 S   0.0  0.4   0:01.64 lfd - sle+
  2273 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
  3922 nobody    20   0  277784  20208   4604 S   0.0  0.8   0:02.24 /usr/sbin+
  6622 root      20   0  183052   1628   1060 S   0.0  0.1   0:00.00 /usr/sbin+
  6706 root      20   0  113284    700    520 S   0.0  0.0   0:00.00 /bin/sh -+
  6722 root      20   0  108056    280    208 S   0.0  0.0   0:00.00 sleep 2h +
  6770 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
  6775 oysipao+  20   0    3152    524     32 S   0.0  0.0   0:00.01 [kworker]
  7285 root      20   0  249444 119356   1292 S   0.0  4.9   0:00.12 spamd chi+
  7286 root      20   0  248320 117508    652 S   0.0  4.9   0:00.00 spamd chi+
 12301 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 12309 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 12513 nobody    20   0  277764  20236   4528 S   0.0  0.8   0:01.20 /usr/sbin+
 13141 nobody    20   0  277764  19928   4248 S   0.0  0.8   0:01.28 /usr/sbin+
 13394 nobody    20   0  277648  20200   4452 S   0.0  0.8   0:00.88 /usr/sbin+
 13621 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 15871 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 18617 nobody    20   0  277892  19872   4072 S   0.0  0.8   0:00.30 /usr/sbin+
 19084 nobody    20   0  277764  19428   3968 S   0.0  0.8   0:00.47 /usr/sbin+
 19107 nobody    20   0  277760  19048   3864 S   0.0  0.8   0:00.29 /usr/sbin+
 19118 nobody    20   0  277496  19220   3964 S   0.0  0.8   0:00.26 /usr/sbin+
 20063 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 20069 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 20164 nobody    20   0  277892  19352   3996 S   0.0  0.8   0:00.35 /usr/sbin+
 20176 nobody    20   0  277632  18772   3736 S   0.0  0.8   0:00.08 /usr/sbin+
 20306 nobody    20   0  277772  18780   3632 S   0.0  0.8   0:00.09 /usr/sbin+
 20334 nobody    20   0  277504  19296   4060 S   0.0  0.8   0:00.28 /usr/sbin+
 20640 nobody    20   0  277876  19504   4060 S   0.0  0.8   0:00.20 /usr/sbin+
 20701 nobody    20   0  277760  18756   3712 S   0.0  0.8   0:00.19 /usr/sbin+
 20727 nobody    20   0  277764  19428   3880 S   0.0  0.8   0:00.21 /usr/sbin+
 20729 nobody    20   0  277764  18604   3572 S   0.0  0.8   0:00.03 /usr/sbin+
 20985 nobody    20   0  277764  18860   3748 S   0.0  0.8   0:00.20 /usr/sbin+
 21015 nobody    20   0  277776  18996   3872 S   0.0  0.8   0:00.21 /usr/sbin+
 21459 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 21503 oyotech+  20   0  394756  53712  11824 S   0.0  2.2   0:00.78 /usr/loca+
 21641 root      20   0  228856  15620   2168 S   0.0  0.6   0:00.00 dnsadmin +
 21883 nobody    20   0  277760  18752   3696 S   0.0  0.8   0:00.07 /usr/sbin+
 21943 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 21944 sshd      20   0  115644   2624   1556 S   0.0  0.1   0:00.00 sshd: [ne+
 21947 mailnull  20   0   90224   7420   3344 S   0.0  0.3   0:00.00 /usr/sbin+
 22072 cloudw    20   0   61592   6024   4448 S   0.0  0.2   0:00.00 dovecot/l+
 22241 healtho+  20   0  462688  69456   4216 S   0.0  2.9   0:03.66 php-fpm: +
 22242 mailnull  20   0   89292   5672   2504 S   0.0  0.2   0:00.00 /usr/sbin+
 22277 healtho+  20   0  460640  67404   4216 S   0.0  2.8   0:02.00 php-fpm: +
 22302 nigeria   20   0  400460   5176   2188 S   0.0  0.2   0:00.00 php-fpm: +
 22307 mailnull  20   0   89496   5360   2224 S   0.0  0.2   0:00.00 /usr/sbin+
 22317 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 22333 root      20   0   86596  10276   5252 S   0.0  0.4   0:00.02 /usr/sbin+
 22337 mailnull  20   0   87880   9444   3372 S   0.0  0.4   0:00.00 /usr/sbin+
 22339 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 22340 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 22341 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 22343 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 22344 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 22346 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 22347 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 22348 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 22349 root      20   0  183048   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 22351 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 22356 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 22358 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 22359 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 22360 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 22361 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 22362 root      20   0   20164    980    784 S   0.0  0.0   0:00.00 /usr/loca+
 22364 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 22365 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 22366 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 22368 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 22369 root      20   0  108052    352    284 S   0.0  0.0   0:00.00 /usr/bin/+
 22374 root      20   0  113288   1512   1300 S   0.0  0.1   0:00.00 /bin/bash+
 22379 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 22381 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 22384 pactpay   20   0  480124  17688  11892 S   0.0  0.7   0:00.02 /opt/cpan+
 22413 wp-tool+  20   0  445028    324    196 S   0.0  0.0   0:00.00 sw-engine+
 22422 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 22426 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [setupvir+
 22427 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:54   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    00:54   0:01  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [watchdogd]
root         31  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/1:1]
root         36  0.4  0.0      0     0 ?        S    00:54   0:07  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kauditd]
root        104  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/0:2]
root        248  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ata_sff]
root        251  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_0]
root        252  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_0]
root        253  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_1]
root        254  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/u200:3]
root        257  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/0:1H]
root        267  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/1:1H]
root        277  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kvm-irqfd-clean]
root        669  0.1  0.0      0     0 ?        S<   00:54   0:02  \_ [loop0]
root        683  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/loop0-8]
root        684  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root       2273  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [kworker/1:3]
root      12301  0.0  0.0      0     0 ?        S    01:07   0:00  \_ [kworker/0:4]
root      12309  0.0  0.0      0     0 ?        S    01:07   0:00  \_ [kworker/u200:0]
root      13621  0.0  0.0      0     0 ?        S    01:09   0:00  \_ [kworker/1:4]
root      15871  0.0  0.0      0     0 ?        S    01:12   0:00  \_ [kworker/0:1]
root      20063  0.0  0.0      0     0 ?        S    01:18   0:00  \_ [kworker/0:0]
root      20069  0.0  0.0      0     0 ?        S    01:18   0:00  \_ [kworker/0:3]
root      22427  0.0  0.0      0     0 ?        S    01:21   0:00  \_ [kworker/1:0]
root          1  0.1  0.1  44256  3328 ?        Ss   00:54   0:02 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.2  40240  6920 ?        Ss   00:54   0:01 /usr/lib/systemd/systemd-journald
root        381  0.0  0.0  45352   268 ?        Ss   00:54   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   496 ?        S<sl 00:54   0:00 /sbin/auditd
polkitd     476  0.0  0.0 612240   864 ?        Ssl  00:54   0:00 /usr/lib/polkit-1/polkitd --no-debug
dbus        477  0.0  0.0  58592  1296 ?        Ss   00:54   0:00 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         486  0.0  0.0  69256   168 ?        Ss   00:54   0:00 /sbin/rpcbind -w
root        495  0.0  0.0  24696  1160 ?        Ss   00:54   0:00 /usr/lib/systemd/systemd-logind
root        499  0.0  0.0  52852   104 ?        Ss   00:54   0:00 /usr/sbin/smartd -n -q never
root        503  0.0  0.0 152780   140 ?        Ss   00:54   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
nscd        505  0.0  0.0 928956  1352 ?        Ssl  00:54   0:01 /usr/sbin/nscd
root        506  0.0  0.2 224144  6436 ?        Ss   00:54   0:00 queueprocd - waiting up to 60s to process a task
root        508  0.0  0.0  21540   408 ?        Ss   00:54   0:00 /usr/sbin/irqbalance --foreground
root        515  0.0  0.0 195208     0 ?        Ssl  00:54   0:00 /usr/sbin/gssproxy -D
root        547  0.0  0.0   4388    36 ?        Ss   00:54   0:00 /usr/sbin/acpid
root        555  0.0  0.0 124480   448 ?        Ss   00:54   0:00 /usr/sbin/crond -n
root       6622  0.0  0.0 183052  1628 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       6706  0.0  0.0 113284   700 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       6722  0.0  0.0 108056   280 ?        S    01:00   0:00  |       \_ sleep 2h 22m
root      21459  0.0  0.0 183048  2160 ?        S    01:20   0:00  \_ /usr/sbin/CROND -n
oyotech+  21503  1.2  2.2 394756 53712 ?        Ssl  01:20   0:00  |   \_ /usr/local/cpanel/bin/autossl_check --all
root      22339  0.0  0.0 183048  2160 ?        S    01:21   0:00  \_ /usr/sbin/CROND -n
root      22361  0.0  0.0 113284  1212 ?        Ss   01:21   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      22369  0.0  0.0 108052   352 ?        S    01:21   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      22374  0.0  0.0 113288  1512 ?        S    01:21   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      22428  0.0  0.0 153840  2092 ?        R    01:21   0:00  |               \_ ps auxf
root      22340  0.0  0.0 183048  2156 ?        S    01:21   0:00  \_ /usr/sbin/CROND -n
root      22368  0.0  0.0  20164   808 ?        Ss   01:21   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      22341  0.0  0.0 183048  2156 ?        S    01:21   0:00  \_ /usr/sbin/CROND -n
root      22366  0.0  0.0  20164   808 ?        Ss   01:21   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      22343  0.0  0.0 183048  2152 ?        S    01:21   0:00  \_ /usr/sbin/CROND -n
root      22360  0.0  0.0  20164   808 ?        Ss   01:21   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      22344  0.0  0.0 183048  2152 ?        S    01:21   0:00  \_ /usr/sbin/CROND -n
root      22364  0.0  0.0  20164   804 ?        Ss   01:21   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      22346  0.0  0.0 183048  2148 ?        S    01:21   0:00  \_ /usr/sbin/CROND -n
root      22362  0.0  0.0  20164   980 ?        Ss   01:21   0:00  |   \_ jailshell (cloudsms) [22429] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      22347  0.0  0.0 183048  2148 ?        S    01:21   0:00  \_ /usr/sbin/CROND -n
root      22359  0.0  0.0  20164   804 ?        Ss   01:21   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      22348  0.0  0.0 183048  2148 ?        S    01:21   0:00  \_ /usr/sbin/CROND -n
root      22356  0.0  0.0  20164   808 ?        Ss   01:21   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      22349  0.0  0.0 183048  2144 ?        S    01:21   0:00  \_ /usr/sbin/CROND -n
root      22365  0.0  0.0  20164   964 ?        Ss   01:21   0:00  |   \_ jailshell (pactpay) [22381] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   22381  0.0  0.0  20164   256 ?        S    01:21   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   22384  0.0  0.7 480124 17688 ?        S    01:21   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      22351  0.0  0.0 183048  2148 ?        S    01:21   0:00  \_ /usr/sbin/CROND -n
root      22358  0.0  0.0  20164   972 ?        Ss   01:21   0:00      \_ jailshell (nigeria) [22379] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   22379  0.0  0.0  20164   264 ?        S    01:21   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   22382  0.0  0.6 404052 16136 ?        S    01:21   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        558  0.0  0.0  24208     0 ?        Ss   00:54   0:00 /usr/sbin/atd -f
root        568  0.0  0.0 114704    36 ttyS0    Ss+  00:54   0:00 /bin/bash
root        572  0.0  0.0 108296    52 tty1     Ss+  00:54   0:00 /sbin/agetty --noclear tty1 linux
mailnull    609  0.0  0.1  89116  3640 ?        Ss   00:54   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  21947  0.0  0.3  90224  7420 ?        S    01:20   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  22242  0.0  0.2  89292  5672 ?        S    01:20   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  22307  0.0  0.2  89496  5360 ?        S    01:20   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        920  0.0  0.0 153404   308 ?        Ss   00:54   0:00 pure-ftpd (SERVER)
systuser    921  0.0  0.0  10388    48 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        923  0.0  0.0  51508   500 ?        Ss   00:54   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1116  0.0  0.0  46912  1544 ?        S    00:54   0:00  \_ dovecot/pop3-login
dovenull   1117  0.0  0.1  47592  3256 ?        S    00:54   0:00  \_ dovecot/imap-login
dovecot    1118  0.0  0.0  10320   240 ?        S    00:54   0:00  \_ dovecot/anvil
root       1119  0.0  0.0  10452   380 ?        S    00:54   0:00  \_ dovecot/log
dovenull   1120  0.0  0.0  46912  1812 ?        S    00:54   0:00  \_ dovecot/pop3-login
dovenull   1121  0.0  0.1  47068  3032 ?        S    00:54   0:00  \_ dovecot/imap-login
root       1128  0.0  0.0  24528  2188 ?        S    00:54   0:00  \_ dovecot/config
dovecot    1137  0.0  0.0  13568   476 ?        S    00:54   0:00  \_ dovecot/stats
dovecot    1190  0.0  0.0  41144  1464 ?        S    00:54   0:00  \_ dovecot/auth
cloudw    22072  0.0  0.2  61592  6024 ?        S    01:20   0:00  \_ dovecot/lmtp
systuser    925  0.0  0.0 113676  1848 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
memcach+    926  0.0  0.0 342400     0 ?        Ssl  00:54   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
telegraf    927  0.0  1.6 5654048 39324 ?       SLsl 00:54   0:01 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    928  0.0  0.5 114016 13576 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        929  1.8  0.3 1349832 9352 ?        Ssl  00:54   0:30 /usr/bin/cspdaemon
root        930  1.4  0.4 1277312 11308 ?       Ssl  00:54   0:23 /usr/bin/checkstatus
systuser    931  0.0  0.0  12660    60 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        933  0.0  0.2 216400  6972 ?        Ssl  00:54   0:00 /usr/sbin/rsyslogd -n
root        935  0.0  0.4 439788 11416 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
named       936  0.0  0.9 637996 23984 ?        Ssl  00:54   0:01 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        938  0.0  0.1 261028  4728 ?        Ss   00:54   0:00 cpsrvd (SSL) - waiting for connections                   
root      22317  0.0  0.0      0     0 ?        Z    01:20   0:00  \_ [cpaneld - servi] <defunct>
root        942  0.0  0.1 400740  2884 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  22183 28.7  2.9 465380 71572 ?        R    01:20   0:05  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  22241 30.5  2.8 462688 69456 ?        S    01:20   0:03  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  22277 28.5  2.7 460640 67404 ?        S    01:20   0:02  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   22302  0.0  0.2 400460  5176 ?        S    01:20   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  22330 23.0  2.3 450912 57796 ?        R    01:21   0:00  \_ php-fpm: pool health_oyostate_gov_ng
root        947  0.8 16.2 1763312 393916 ?      Ssl  00:54   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        964  0.0  0.0 111304   412 ?        Ss   00:54   0:00 /usr/sbin/sshd -D
root      21943  0.0  0.1 111304  4272 ?        Ss   01:20   0:00  \_ sshd: [accepted]
sshd      21944  0.0  0.1 115644  2624 ?        S    01:20   0:00      \_ sshd: [net]
root        972  0.0  0.0 389508   740 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
cpanelc+    979  0.0  0.1   9828  2744 ?        Ss   00:54   0:01 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        982  0.0  0.0 396248   652 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        984  0.0  0.0 388892   696 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.1 445028  3236 ?        Ss   00:54   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  22413  0.0  0.0 445028   324 ?        S    01:21   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    986  0.0  0.0 113272  1820 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        987  0.0  0.0 572372   760 ?        Ssl  00:54   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser   1133  0.0  0.1 157708  2996 ?        S    00:54   0:00 SonarPush 0.6.12 [sleeping]
root       1172  0.1  4.9 248320 119796 ?       Ss   00:54   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7285  0.0  4.9 249444 119356 ?       S    01:00   0:00  \_ spamd child
root       7286  0.0  4.8 248320 117508 ?       S    01:00   0:00  \_ spamd child
wp-tool+   1258  0.0  1.3 412368 32236 ?        Ss   00:54   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1259  0.0  0.5 387528 12948 ?        Ss   00:54   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1294  0.0  0.7 228228 18884 ?        Ss   00:54   0:00 dnsadmin - server mode
root      21641  0.0  0.6 228856 15620 ?        S    01:20   0:00  \_ dnsadmin - waiting for request 12 on connected socket
root       1298  0.0  0.9 262224 22792 ?        Ss   00:54   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1300  0.0  0.4 209344 10792 ?        Ss   00:54   0:00 tailwatchd
root       1692  0.0  0.0 299272   884 ?        Ss   00:54   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1709  0.0  0.0 130416  1428 ?        SN   00:54   0:00 cpanellogd - sleeping for logs
mysql      1752  3.0  8.9 1462084 216212 ?      Sl   00:54   0:48 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1943  0.0  0.3 266992  8056 ?        Ss   00:54   0:00 /usr/sbin/httpd -k start
root       1945  0.0  0.0  12832   424 ?        S    00:54   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1946  0.0  0.0  12732   272 ?        S    00:54   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1947  0.0  0.0  12876   340 ?        S    00:54   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1952  0.0  0.0  53268    92 ?        S    00:54   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     3922  0.1  0.8 277784 20208 ?        S    00:56   0:02  \_ /usr/sbin/httpd -k start
nobody    12513  0.1  0.8 277764 20236 ?        S    01:07   0:01  \_ /usr/sbin/httpd -k start
nobody    13141  0.1  0.8 277764 19928 ?        S    01:08   0:01  \_ /usr/sbin/httpd -k start
nobody    13394  0.1  0.8 277648 20200 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    18617  0.0  0.8 277892 19872 ?        S    01:15   0:00  \_ /usr/sbin/httpd -k start
nobody    19084  0.1  0.8 277764 19428 ?        S    01:16   0:00  \_ /usr/sbin/httpd -k start
nobody    19107  0.1  0.7 277760 19048 ?        S    01:16   0:00  \_ /usr/sbin/httpd -k start
nobody    19118  0.0  0.7 277496 19220 ?        S    01:16   0:00  \_ /usr/sbin/httpd -k start
nobody    20164  0.1  0.7 277892 19352 ?        S    01:18   0:00  \_ /usr/sbin/httpd -k start
nobody    20176  0.0  0.7 277632 18772 ?        S    01:18   0:00  \_ /usr/sbin/httpd -k start
nobody    20306  0.0  0.7 277772 18780 ?        S    01:18   0:00  \_ /usr/sbin/httpd -k start
nobody    20334  0.1  0.7 277504 19296 ?        S    01:18   0:00  \_ /usr/sbin/httpd -k start
nobody    20640  0.1  0.8 277876 19504 ?        S    01:18   0:00  \_ /usr/sbin/httpd -k start
nobody    20701  0.1  0.7 277760 18756 ?        S    01:18   0:00  \_ /usr/sbin/httpd -k start
nobody    20727  0.1  0.8 277764 19428 ?        S    01:18   0:00  \_ /usr/sbin/httpd -k start
nobody    20729  0.0  0.7 277764 18604 ?        S    01:18   0:00  \_ /usr/sbin/httpd -k start
nobody    20985  0.1  0.7 277764 18860 ?        S    01:19   0:00  \_ /usr/sbin/httpd -k start
nobody    21015  0.2  0.7 277776 18996 ?        S    01:19   0:00  \_ /usr/sbin/httpd -k start
cloudw    22423  0.0  0.6 353712 15976 ?        R    01:21   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    21883  0.1  0.7 277760 18752 ?        S    01:20   0:00  \_ /usr/sbin/httpd -k start
root       2017  0.1  0.3 181300  9624 ?        Ss   00:54   0:01 lfd - sleeping
oysipao+   6770  0.0  0.0   3148   416 ?        Ss   01:00   0:00 [kworker]
oysipao+   6775  0.0  0.0   3152   524 ?        S    01:00   0:00  \_ [kworker]
root      22333  2.0  0.4  86596 10276 ?        S    01:21   0:00 /usr/sbin/exim -Mc 1vLsPz-000000005fT-3CdD
mailnull  22337  0.0  0.3  87880  9444 ?        S    01:21   0:00  \_ /usr/sbin/exim -Mc 1vLsPz-000000005fT-3CdD
## mysql stats
Uptime: 1605  Threads: 5  Questions: 400015  Slow queries: 0  Opens: 1778  Flush tables: 1  Open tables: 1700  Queries per second avg: 249.230
*************************** 1. row ***************************
     Id: 6165
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 6166
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 6167
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 6168
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 6176
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 104.23.209.162 TIME_WAIT
      1 15.235.96.242 TIME_WAIT
      1 172.70.100.40 TIME_WAIT
      1 172.70.43.113 TIME_WAIT
      1 172.71.195.45 TIME_WAIT
      1 172.71.222.155 TIME_WAIT
      1 172.71.255.58 TIME_WAIT
      1 ::1 TIME_WAIT
      1 40.77.167.77 TIME_WAIT
      1 54.39.136.162 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 49.51.73.183 TIME_WAIT
      7 173.199.190.172 TIME_WAIT
    209 129.212.183.198 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 20-Nov-2025 01:21:02 WAT
   Restart Time: Thursday, 20-Nov-2025 00:54:23 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 26 minutes 39 seconds
   Server load: 4.17 3.54 2.84
   Total accesses: 11238 - Total Traffic: 200.1 MB - Total Duration: 7628579
   CPU Usage: u6.67 s2.39 cu95.23 cs70.37 - 10.9% CPU load
   7.03 requests/sec - 128.1 kB/second - 18.2 kB/request - 678.82 ms/request
   15 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

.KKK.K.K_K.KK.._._K....._WW.K...W.K.R...........................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc    M CPU  SS  Req  Dur   Conn  Child  Slot     Client      Protocol              VHost                                          Request
   0-0  -     0/0/457   . 0.00 9   0   282205 0.0   0.00  7.64  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   1-0  21883 1/15/477  K 0.23 3   287 329625 34.7  0.29  7.40  192.178.4.102   http/1.1 team.cloudware.ng:443           GET /?l=3681351240 HTTP/1.1
   2-0  20985 1/36/439  K 0.79 3   264 291914 34.8  0.86  8.65  192.178.4.102   http/1.1 team.cloudware.ng:443           GET /?l=1344306816 HTTP/1.1
   3-0  21015 9/50/603  K 0.75 0   318 398493 277.0 0.84  11.27 192.178.4.96    http/1.1 team.cloudware.ng:443           GET /?l=1000701754 HTTP/1.1
   4-0  -     0/0/444   . 0.00 112 0   300579 0.0   0.00  8.24  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   5-0  18617 2/73/476  K 1.23 4   353 316887 63.5  1.09  7.54  192.178.4.104   http/1.1 team.cloudware.ng:443           GET /?l=3980442935 HTTP/1.1
   6-0  -     0/0/428   . 0.00 111 0   305044 0.0   0.00  6.84  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   7-0  19084 3/110/462 K 1.48 2   319 325959 96.1  1.76  7.50  192.178.4.101   http/1.1 team.cloudware.ng:443           GET /?l=3788684044 HTTP/1.1
   8-0  12513 0/304/492 _ 4.32 0   355 324430 0.0   4.39  7.09  192.178.4.103   http/1.1 team.cloudware.ng:443           GET /?l=3664846277 HTTP/1.1
   9-0  13141 1/334/411 K 4.05 1   297 292915 34.5  4.72  6.11  192.178.4.105   http/1.1 team.cloudware.ng:443           GET /?l=504984610 HTTP/1.1
   10-0 -     0/0/353   . 0.00 29  0   250549 0.0   0.00  6.35  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   11-0 19107 1/69/396  K 0.96 1   331 281633 35.4  1.10  8.60  192.178.4.105   http/1.1 team.cloudware.ng:443           GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1708538
   12-0 3922  3/468/472 K 9.18 2   446 325618 97.1  9.50  9.52  192.178.4.98    http/1.1 team.cloudware.ng:443           GET /?l=2668748459 HTTP/1.1
   13-0 -     0/0/326   . 0.00 65  0   234849 0.0   0.00  5.40  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   14-0 -     0/0/198   . 0.00 30  0   143172 0.0   0.00  3.71  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   15-0 19118 0/64/130  _ 0.82 0   355 101104 0.0   0.96  2.11  129.212.183.198 http/1.1 health.oyostate.gov.ng:443      POST //xmlrpc.php HTTP/1.1
   16-0 -     0/0/320   . 0.00 55  0   205594 0.0   0.00  7.08  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   17-0 20164 0/82/181  _ 1.25 0   0   100015 0.0   1.97  4.29  ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   18-0 20176 2/24/305  K 0.14 2   366 195876 65.8  0.44  6.10  192.178.4.103   http/1.1 team.cloudware.ng:443           GET /?l=73652618 HTTP/1.1
   19-0 -     0/0/485   . 0.00 4   0   316380 0.0   0.00  8.61  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   20-0 -     0/0/144   . 0.00 110 0   96028  0.0   0.00  3.15  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   21-0 -     0/0/92    . 0.00 116 0   63418  0.0   0.00  1.56  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   22-0 -     0/0/354   . 0.00 27  0   234087 0.0   0.00  8.50  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   23-0 -     0/0/504   . 0.00 77  0   358413 0.0   0.00  10.74 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   24-0 20306 0/19/247  _ 0.33 0   337 107609 0.0   0.38  4.29  129.212.183.198 http/1.1 health.oyostate.gov.ng:443      POST //xmlrpc.php HTTP/1.1
   25-0 20334 0/62/445  W 0.99 0   0   290228 0.0   1.09  8.01  129.212.183.198 http/1.1 health.oyostate.gov.ng:443      POST //xmlrpc.php HTTP/1.1
   26-0 20640 0/51/307  W 0.91 0   0   189339 0.0   0.75  5.95  129.212.183.198 http/1.1 health.oyostate.gov.ng:443      POST //xmlrpc.php HTTP/1.1
   27-0 -     0/0/76    . 0.00 115 0   72575  0.0   0.00  0.81  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   28-0 13394 2/220/220 K 2.70 0   368 164429 65.2  3.44  3.44  192.178.4.97    http/1.1 team.cloudware.ng:443           GET /?l=1097531725 HTTP/1.1
   29-0 -     0/0/110   . 0.00 78  0   78997  0.0   0.00  1.36  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   30-0 -     0/0/248   . 0.00 66  0   177664 0.0   0.00  3.72  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   31-0 -     0/0/59    . 0.00 28  0   37456  0.0   0.00  0.71  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   32-0 20701 0/45/202  W 0.59 0   0   157426 0.0   0.73  2.62  ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   33-0 -     0/0/218   . 0.00 84  0   146168 0.0   0.00  2.90  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   34-0 20727 1/47/50   K 0.74 0   372 37525  35.1  1.20  1.22  192.178.4.100   http/1.1 team.cloudware.ng:443           GET /?l=870401367 HTTP/1.1
   35-0 -     0/0/98    . 0.00 109 0   88437  0.0   0.00  0.90  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   36-0 20729 0/6/6     R 0.11 102 378 4513   0.0   0.16  0.16  167.88.171.183  http/1.1 workflow-management-software.co
   37-0 -     0/0/3     . 0.00 117 0   1408   0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 891
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 10 seconds, (range: 0...47)
   index usage: 15%, cache usage: 21%
   total entries stored since starting: 4772
   total entries replaced since starting: 0
   total entries expired since starting: 3874
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 15 miss
   total removes since starting: 8 hit, 4 miss
Youez - 2016 - github.com/yon3zu
LinuXploit